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Security Committee SECOM-D-013 


10 January 1980 


MEMORANDUM FOR THE RECORD 


FROM: . 
SECOM 


SUBJECT: Computer Security Subcommittee Meeting | | 


1. I represented the SECOM staff at the 10 January 1980 
meeting of the Computer Security Subcommittee eld at the 
Langley Headquarters Building. Chairman, 
presided. Copies of the minu the previous meeting 
were distributed (attached). 


2. Ld and I provided background information 


on his designation as an observer on the computer security 
working group of the National Communications Security 
Committee (NCSC). He advised that he knew of nothing done 
to this date to fix the membership of this working group. 


3. The DIA member [|__]distributed his agency's 
comments (attached) on the pending revision of DCID 1/16. 
He said DIA was increasingly concerned with costs and other 
problems associated with ADP security in industry. He sug- 
gested DIA willingness to divide the country into areas of 
executive agent responsibility for industrial security 
inspections. I said, and SSS agreed, that Community 
development of uniform standards was an essential prerequisite 
to the success of any such approach to industrial security. 

said he planned to speak at the 30 January  SECOM 
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meeting to the desirability of executive agent arrangements 
by area for industrial Security in ADP matters. Several 


asked DIA to designate a representative to work wit 


and on the strawman draft, beginning in early 
February 1980. 


4. Stated his concern about the lack of 
adequate security standards for office equipment, particularly 
With regard to maintenance and turnkey installation thereof. 


was better understood. LL  demurred, and said 
ere was much that could be done on the directive's update 
on a "fill in the blanks later" basis with regard to 
applications. A majority of the members said they would like 
to see the[____Jaudio-visual presentation being prepared as 
a briefing aid. and I agreed to try to locate a 
copy for showing at the next subcommittee meetin 


5. request. discussed hi 
understanding o € impact of the 4 
ee that the revision effort fe deferred until 
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8 The next meeting of the subcommittee set for 0930, - 
7 February 1980, at the nn, |] 22a 


25X1A 


Attachments 


Distribution: 
Orig ~- Subject 
1 - Chrono 


25X1A SECOM/[____sidss fh (1/10/80) 
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30 November 1979 
DCLSEC~CSS-M127 


1. The one hundred and twenty-seventh meeting of the Computer Security 


Subcommittee convened at 0930 on 8 November 1979 in thef sd 25X1A 


McLean, VA. In attendance were: 


Chairman 
Executive Secretary . 
CIA 
_ Mr. Edward Springer, DOE 
NSA Alternate 

Mr. Robert Graytock, Department of Justice 

Executive Secretary, SECOM 
Mr. Lynn Culkowski, Air Force 

DIA 

Mr. Jon Arbogast, FBI 
Mr. James Studer, Army 


[CIA Alternate 


2e [ The minutes of the 2 October meeting were approved as written. 


3. [_] There was a further discussion of the ee ee co 25X1 
by Paragraph 3 of the minutes of the 2 October meeting). (SECOM) 25X1A 
reported that the DCI has approved the[____concept, but that the administrative 95x 4 
details of the actual implementation have yet to be completed. He further reported 
that Secretary Brown had asked that COMINT be granted. an exemption from decompart-- 
mentation. The agreement reached was that no decompartmentation action will be 
taken regarding COMINT material without consultation with SECDEF or his designee. 

The administrative details of this arrangement were worked out between SECDEF and 


DCL, and the implementation manuals for[___ Jare reportedly being finalized. 25x 


4. [ The chairman reported that the annual report to the Security 
Committee is due in mid-January, and asked that the members consider items which 


they wanted to have included in the report. 


56 = In the continuing saga of the EEI's, DIA concurred in the present 
version, the Army member also indicated approval but stated that he would provide 
final concurrence by the next meeting. NSA received some last minute comments 

from an unexpected in-house source, but will also provide final comments/concurrence 


by the next meeting. 


25X1 
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7. LJ There was further discussion of the proposed rewrite of DCID 1/16, 
me 


and the od for proceeding. DIA suggested that we begin by having each 
organization submit the comments on, and desired modifications to, the present 
document. The chairman asked that the members provide such inputs from their 
respective organizations by 15 December 1979. 


8. iii] In previous meetings, the membership has discussed the problem of 
contractors who deal with multiple intelligence agencies, and the resultant 
confusion and waste which accompany multiple and often conflicting security guidance 
and procedures. Accordingly, ] drafted a 95x14, 
statement of the problem for submission to SECOM. 


9. [ At the previous meeting, there was some discussion of security 
concerns with the proliferation of word processing systems. Mr. Studer provided 
copies of a draft Computer Security News Note, prepared by [_____—and 25X1A° 
himself, on this subject. The chairman emphasized that the purpose of this item 
is merely to bring a much overlooked problem to the attention of the community. It 
was agreed that any comments on the proposed News Note would be related directly 
to Mr.e Studer. 


10. [| brought up the SECOM draft of the DCID 1/11 rewrite. 
He stated that he would nonconcur because of the exclusion of explicit words 
dealing with computers which are involved in communications. Specific comments will 
be forwarded to SECOM. 


ii. The next meeting will be held at 0930 on 10 January 1980 at the 


25X1A 


Executive Secretary 
Computer Security Subcommittee 
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